Bpf_get_fsverity_digest: Pinning binaries from a BPF LSM hook (bomfather.dev)